Get the latest tech news

How one Twitch chat message became code execution on a streamer’s PC


A vulnerable chat overlay, an unsandboxed Chromium renderer, and a V8 bug already exploited in the wild were enough to turn viewer-controlled text into native code execution, with OBS itself left at its default settings. I found a Twitch chat overlay that rendered viewer messages as raw HTML inside an OBS Browser Source.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Twitch

Twitch

Photo of Streamer

Streamer

Photo of code execution

code execution

Related news:

News photo

Hackers start exploiting critical WordPress flaw for code execution

News photo

GTA 6 Online could arrive next year, says Twitch CEO

News photo

Rockstar hasn't said anything about a GTA 6 Online multiplayer mode just yet, but Twitch's CEO reckons it'll land next year